Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f32302d3232203d3e203238333238.roa
File:                     3138392e31342e3139322e302f32302d3232203d3e203238333238.roa (raw, json)
Hash identifier:          Q1lQVVln6Ct9hqa+H2j0X7jiY77zYGfS+PjdfydN+oo=
Subject key identifier:   4B:75:4F:1D:3D:BD:9C:8C:0E:48:27:70:10:D9:9B:23:E8:E7:D2:E6
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       5E94617BAE9543D58D2F746CF128F27EBE085A49
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f32302d3232203d3e203238333238.roa
Signing time:             Thu 25 Apr 2024 11:31:10 +0000
ROA not before:           Thu 25 Apr 2024 11:26:10 +0000
ROA not after:            Thu 24 Apr 2025 11:31:10 +0000
asID:                     28328
IP address blocks:        189.14.192.0/20 maxlen: 22

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 16:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:94:61:7b:ae:95:43:d5:8d:2f:74:6c:f1:28:f2:7e:be:08:5a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Apr 25 11:26:10 2024 GMT
            Not After : Apr 24 11:31:10 2025 GMT
        Subject: CN=4B754F1D3DBD9C8C0E48277010D99B23E8E7D2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:df:66:25:26:4e:fe:9d:94:40:34:1f:85:f5:
                    79:f2:10:86:a4:15:75:1f:00:65:11:bf:27:29:e8:
                    78:30:7c:ad:33:c1:b3:4a:6b:ff:9c:3a:46:1c:8f:
                    45:bb:b9:45:6b:99:64:1c:0a:d0:41:ae:56:3d:f2:
                    29:95:09:b2:c5:23:69:26:6f:5e:3f:30:da:6d:76:
                    36:01:b2:43:41:28:b4:4b:dc:ea:db:0a:a6:9a:19:
                    65:10:52:21:60:51:19:36:d9:ba:37:cc:5f:99:4a:
                    ac:17:48:d8:b5:12:9e:82:d5:31:2f:67:34:c6:49:
                    77:71:c9:a2:9c:67:d4:b8:52:99:5d:60:e7:fc:ea:
                    bb:df:8f:e9:9e:e8:ec:2b:93:53:4a:31:b5:a3:b1:
                    bc:72:eb:2f:d8:e9:39:74:ad:5b:2f:04:9c:76:61:
                    a0:90:a9:40:56:f0:70:be:0f:71:03:91:74:28:44:
                    c1:29:38:d1:9e:5a:c5:5b:b7:07:1b:6e:2c:a8:11:
                    ab:ba:e0:6a:16:03:64:db:5b:8f:60:32:2c:1b:f7:
                    96:60:7c:37:ba:4d:9b:47:3a:3c:6c:29:6a:24:bd:
                    26:4a:23:85:b7:46:3d:4b:ad:43:d0:ad:16:96:ff:
                    b2:8f:af:1b:c7:46:9f:4e:4d:ea:64:b7:a9:8b:43:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:75:4F:1D:3D:BD:9C:8C:0E:48:27:70:10:D9:9B:23:E8:E7:D2:E6
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f32302d3232203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:d2:ac:81:83:65:60:7b:b4:08:19:f8:e0:74:24:90:39:90:
         a8:ff:e6:b3:ac:bb:46:47:43:b7:cd:ab:64:8d:29:cf:20:e7:
         1b:0b:bf:f9:c1:3b:6b:8c:49:7e:60:8a:f5:0d:be:36:7b:b1:
         db:35:af:0e:fd:eb:57:8a:2f:64:65:b6:28:dd:7d:ce:9a:72:
         a8:a8:50:65:b7:b6:b9:b8:d0:39:67:91:76:a7:24:a9:a7:42:
         c9:a7:d7:3d:96:74:d7:ed:a6:56:2e:b9:f0:97:cf:76:5b:c9:
         9e:a0:2a:1b:89:73:01:8e:d5:f6:ba:eb:8b:e3:d6:81:4c:d7:
         68:30:c3:ca:50:36:56:fc:a1:77:69:d9:12:af:18:1c:1b:25:
         08:90:af:dc:0c:3b:1c:83:41:9b:62:cf:a5:b1:e1:e8:b3:d4:
         98:fc:09:c8:ea:7a:a3:6c:d5:91:0e:c5:52:8a:68:8e:24:63:
         6f:83:04:04:84:a2:c0:22:80:46:35:8a:fd:0d:78:65:43:53:
         fd:66:7f:80:51:ef:d9:03:98:33:33:79:da:c0:45:fe:c4:6b:
         58:7c:8d:68:68:6a:a8:0b:50:a2:15:c4:17:63:f1:6d:11:5e:
         d2:b0:ce:a4:ee:11:16:4d:a8:35:66:53:c1:ba:1e:e1:c3:02:
         e5:dc:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org